CVE-2022-1980: A vulnerability was found in SourceCodester Product Show Room Site 1.0

Routine

LOW 2.4DOWNGRADE

CVE-2022-1980 is a low-severity flaw (CVSS 2.4) affecting product show room site. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely but requires authentication. Exploit details have been disclosed to the public.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	2.4 (Low)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	High
User interaction	Required
EPSS exploit chance	0.6% (top 49%)
CISA exploited list	No
Weakness	CWE-79
Published	2022-06-02
Last modified	2026-06-17

Publisher (CNA): VulDB · Vendor: product show room site project

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2022-06-02 18:15 UTCPublished CVE record published
2026-06-17 04:23 UTCUpdated Record last modified

product show room site project product show room site DOWNGRADE

Affected: 1.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.0

1. Check installed version

apt-cache policy product-show-room-site || rpm -q product-show-room-site || product-show-room-site --version

2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)

apt-cache madison product-show-room-site sudo apt install product-show-room-site=<VERSION_BEFORE_1.0> sudo apt-mark hold product-show-room-site

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list product-show-room-site sudo dnf downgrade product-show-room-site-<VERSION_BEFORE_1.0> sudo dnf versionlock add product-show-room-site

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-1980?

product show room site: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2022-1980 being exploited?

CVE-2022-1980 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-1980 affect?

CVE-2022-1980 affects product show room site. Severity is low (CVSS 2.4). A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input <script>al

How urgent is CVE-2022-1980?

Priority 21/100. No elevated risk signals yet.

Related CVEs

CVE-2024-33304 MEDIUM 6.1 DOWNGRADE SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" under Add Use
CVE-2024-33303 HIGH 8.2 DOWNGRADE SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Us
CVE-2024-33302 MEDIUM 5.3 DOWNGRADE SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting (XSS) via "Middle Name"
CVE-2022-32416 HIGH 7.2 DOWNGRADE Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_product.
CVE-2022-32415 HIGH 8.8 DOWNGRADE Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/view_product&id=.

References

← Back to latest CVEs